Remark 



Applicants respectfully request reconsideration of this application as amended. 
Claims 1 and 1 1 are amended. Claims 1 and 1 1, as amended, refer to generating a 
configuration baseline and a file system database. The elements were not previously claimed 
and further distinguish the invention over the references. 

Conclusion 

Applicants respectfully submit that the claims as amended are now in condition for 
allowance. Accordingly, Applicants respectfully request the rejections be withdrawn and the 
claims as amended be allowed. 
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# 



Version with Markings to Show Changes Made 



Insertions are underlined, deletions are bracketed. 



1. 



(Amended) A security system for a computer apparatus, wherein said 



2 



computer apparatus includes a processor and system memory, said security system 



3 



compnsmg: 



4 



at least one security module which under direction from the processor accesses and 



5 



analyzes selected portions of the computer apparatus to identify vulnerabilities; 



6 



at least one utility module which under the direction from the processor, performs 



7 various utility functions with regards to the computer apparatus in response to the identified 

8 vulnerabilities , the utility functions including generating a configuration baseline and a file 

9 system database for use in performing other utility functions : and 

10 a security system memory which contains security information for performing the analysis of 

1 1 the computer apparatus. 

1 11. (Amended) A method of providing a security assessment for a computer 

2 system which includes a system memory, comprising the steps of: 

3 generating a configuration baseline: 

4 providing a security subsystem in the computer system such that functionality of the 

5 security subsystem is directed through a processor for the computer system, wherein the 

6 security performs steps comprising: 

7 identifying a configuration of system and generating a file system database : 

8 accessing the system memory and performing at least one procedure to provide a 

9 security assessment for at least one aspect of the computer system; 

10 as a result of any vulnerabilities discovered in the assessment, identifying corrective 

1 1 measures to be taken with regards to the computer system; 
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12 reporting the discovered vulnerability and the identified corrective measures; and 

13 upon receiving an appropriate command, initiating the corrective measures. 
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